General
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.hy.7e5efbaf06143506ff068548384b72fe
- Size 28KB
- Sample261006-tek25a1xe1
- SHA256 d3db14079a86eaee8c0b395cb359069eeb61e7045d1620e046fcd33e8d841fa2
- MD5 7e5efbaf06143506ff068548384b72fe
- SHA1 beb15ddecb951b48e74dd11742f261a8834037d5
- SHA512 e0f985dc84b84d4969c3205b2bcfb93258e301d8fea42adf8054c70f832035cbcdca9400221e63eae7393a30be36291670b351fdf545722508a9e4b1893f55b1
- SSDEEP 768:ISmiXtf8u2btaaE5bs8Jx7hVCjSevkxv6jaMgd:ISmiubtaaEdfjf8SJv6Tgd
- TLSH T106D2E04A39E89D32D944513BA3C5B289534460542BE620F98F9CD9DEBEB24706F30772
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Agent.hy.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.hy.7e5efbaf06143506ff068548384b72fe
- Size 28KB
- SHA256 d3db14079a86eaee8c0b395cb359069eeb61e7045d1620e046fcd33e8d841fa2
- MD5 7e5efbaf06143506ff068548384b72fe
- SHA1 beb15ddecb951b48e74dd11742f261a8834037d5
- SHA512 e0f985dc84b84d4969c3205b2bcfb93258e301d8fea42adf8054c70f832035cbcdca9400221e63eae7393a30be36291670b351fdf545722508a9e4b1893f55b1
- SSDEEP 768:ISmiXtf8u2btaaE5bs8Jx7hVCjSevkxv6jaMgd:ISmiubtaaEdfjf8SJv6Tgd
- TLSH T106D2E04A39E89D32D944513BA3C5B289534460542BE620F98F9CD9DEBEB24706F30772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Modifies Shared Task Scheduler registry keys
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory